Question

A network administrator is designing device administration for a fleet of Cisco IOS routers and switches. Requirements include: encrypting the entire packet payload (not just the password), granular per-command authorization for network operators, and separating authentication, authorization, and accounting into independent functions. Which AAA protocol should be configured in Cisco ISE to meet all of these requirements?

Accepted Answer

TACACS+, because it encrypts the full packet body and separates AAA functions, enabling per-command authorization

Answer

RADIUS, because it encrypts the entire packet and supports command-by-command authorization natively

Answer

RADIUS with CoA, because Change of Authorization enforces per-command restrictions dynamically

Answer

TACACS+, but only the username and password fields are encrypted while authorization is combined with authentication